Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: R75RAN6Ot4lgmrg8UA9Zdq90gZAb8O+wdbCU/72mBIU=
Subject key identifier: AB:44:93:35:7B:74:A8:E1:1A:31:1D:92:2E:A0:CB:C5:46:67:77:3D
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019A4DE227AE47AA87108DAF37DB44A43115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 06FE
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: lFADj5YmanLJsyvgEk0PVPwnlDpEfqcDrsbjWj/OG08=)
2: PFluydWOaBTgnh4o2FnGy8AoCI0.roa (hash: dYpglGU9LkXsNL5grxQDMbO9Dj9URsF+c2voMiQoHR0=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:27:ae:47:aa:87:10:8d:af:37:db:44:a4:31:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=ab4493357b74a8e11a311d922ea0cbc54667773d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:ad:15:24:b7:a0:79:fb:51:dc:3c:bc:31:
53:31:b7:5a:bb:40:73:c3:64:a7:21:c1:90:ac:4a:
0a:1d:9d:fa:40:bd:ba:74:70:0d:90:22:c0:28:c7:
d1:a7:9d:0b:31:62:88:76:14:c1:34:90:b7:40:5a:
22:de:a3:e7:15:20:9b:8c:c2:6e:b6:c1:97:d8:fa:
68:49:a3:39:1e:59:d7:02:ab:48:68:ae:97:83:56:
7a:13:a6:4b:33:7a:17:c3:77:aa:76:95:b2:14:d8:
cb:9d:00:99:f8:a4:6d:83:ed:fc:8e:86:b6:51:87:
eb:a1:8b:86:79:e7:10:95:63:1a:87:ab:6d:78:0e:
df:43:92:ee:e3:10:7e:e1:72:b1:ea:03:61:af:1d:
c5:14:71:9e:00:be:0d:2e:a4:be:12:dc:1b:2d:28:
9e:69:08:76:ae:73:35:af:41:03:82:ba:dd:e9:82:
4a:fd:cc:99:b6:0a:df:8a:0d:73:96:e6:04:e2:86:
e2:95:9e:89:48:12:03:21:85:ea:ad:7e:62:dd:79:
5e:a9:27:73:37:f2:e9:cf:70:44:d8:a8:44:66:9d:
6a:b0:9b:7f:9b:e6:6b:ba:9b:6f:69:00:6f:79:f9:
6c:fd:b2:e1:33:cc:de:0b:8f:08:e4:55:93:96:98:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:93:35:7B:74:A8:E1:1A:31:1D:92:2E:A0:CB:C5:46:67:77:3D
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:ea:f3:0f:9f:e4:60:aa:b5:c5:d9:ef:14:26:82:ed:30:
df:de:9c:5c:cf:82:14:1f:2d:9b:45:9a:54:9c:a9:bc:49:dd:
76:24:43:96:28:dd:38:5e:6c:8f:11:8a:2e:b9:f5:20:1b:9a:
98:bc:22:4c:0d:e3:2e:6f:e0:f0:cf:61:89:24:e4:e4:7f:67:
61:5f:f3:53:68:ea:a5:8d:31:a3:9b:db:7d:6f:19:08:23:e6:
02:75:5e:aa:0b:56:e2:ee:4f:19:a8:63:de:bd:36:4d:4b:20:
45:b4:80:55:29:e1:3c:c5:3b:12:f8:86:43:24:12:27:6a:53:
9e:87:a3:92:1d:84:cd:50:30:7a:b1:21:19:5b:e1:7c:d8:91:
bd:71:a0:7c:01:11:b3:f9:0e:7e:53:77:36:6c:8d:2c:76:60:
e5:5c:6d:a7:f6:12:5b:c5:df:cb:4f:fe:b1:59:84:9f:5e:24:
ff:97:06:3b:44:94:13:bc:d6:93:4a:3e:3d:a4:dc:13:3a:18:
1b:5d:fd:05:3e:73:25:2b:1c:33:43:16:a9:16:4e:d6:d5:32:
3c:8b:41:27:a4:2c:af:37:dc:68:84:87:ac:d5:8a:cc:43:28:
35:f6:c5:65:b7:0f:4d:72:7c:33:59:69:7d:76:dc:23:d7:91:
f3:1c:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:16 2025 by rpki-client